JPH10134126A - Electronic money system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent money data from being forged and to easily detect an illegal transaction by transferring transaction money instructed with a transfer instruction message from a center from a specific account to the account specified with the transfer instruction message and sending a transfer completion message to the center after the transfer is completed. SOLUTION: A bank center 17 has a settlement account as the account of a user (bearer) of an electronic money card 19 and a special account as the operation account of electronic money that the bank has, and perform money reception and payment between those accounts. Namely, the bank center 17 once receiving a money payment message from an electronic money server 13 decides the account number corresponding to the card ID by referring to an account table. Then the balance of the settlement account of this account number is checked and when it is decided that the balance is larger than an indicated amount of money, it is decided that the money can be paid, thereby moving (transferring) the specific money from the settlement account to the special account. Then a money payment completion message reporting the transfer completion is sent to the electronic money server 13.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an electronic money system for trading electronic money as financial information.

[0002]

2. Description of the Related Art An electronic money system which enables electronic settlement using monetary data having a monetary value is disclosed, for example, in Japanese Patent Publication No. 7-111723.

[0003]

In an electronic money system, it is necessary to effectively prevent use by unauthorized persons, copying of financial data, forgery, and the like. Further, when the use of forged financial data is found, it is desirable that the distribution channel can be traced to find the source of fraud or forgery. However, an electronic money system satisfying such a demand has not yet been proposed.

[0004] The present invention has been made in view of the above situation, and has as its object to provide an electronic money system capable of effectively preventing forgery or the like of money data. Another object of the present invention is to provide an electronic money system that easily detects unauthorized transactions and has excellent traceability.

[0005]

In order to achieve the above object, an electronic money system according to a first aspect of the present invention includes a write-once storage unit and an IC memory unit, and stores information relating to a monetary value. An electronic money card, a terminal that processes the electronic money card, a center connected to the terminal via a communication line and controlling the terminal, and a bank computer connected to the center via a communication line. In the money system, the write-once storage unit of the electronic money card stores transaction history information, and the IC memory unit of the electronic money card stores the position of the transaction history information stored on the write-once storage unit. And input means for inputting an instruction of a transaction of electronic money including cash and a transaction amount, and the terminal input by the input means. A cashing request transmitting unit for transmitting a cashing request message based on the cashing instruction and the transaction amount of the cashing instruction to the center; and responding to a cashing end message from the center, and transmitting the cashing completion message to the IC memory unit of the electronic money card. Means for writing transaction history information relating to the cashing process to the write-once type storage unit of the electronic money card according to the stored position information, wherein the center receives the cashing request message from the terminal, Means for transmitting a transfer instruction message based on the received cash request message to the bank computer, and means for transmitting the cash end message to the terminal in response to a transfer completion message from the bank computer. The bank computer specifies the transaction amount indicated by the transfer instruction message from the center from a predetermined account by the transfer instruction message. Comprising a transfer means to transfer the account was, and means for transmitting the transfer completion message and transfer is complete to the center by the transfer means, characterized in that.

[0006] According to such a configuration, the user can transfer the electronic money stored in the electronic money card to his / her own account, thereby redeeming the electronic money. In addition, since the transaction history is recorded in the write-once storage unit, when an abnormality occurs, the recorded contents of the write-once storage unit are verified,
Fraud and the like can be easily detected.

[0007] At least one of the write-once type storage unit and the IC memory unit of the electronic money card may store account specifying information for specifying an account. Means for reading the account identification information stored in the cashing request message and including the same in the cashing request message. The account specifying information may be the account number itself, or another number corresponding to the account number, for example, a card ID.

[0008] The terminal determines whether or not the balance held by the electronic money card is equal to or greater than the transaction amount input by the input means. If the balance is less than the transaction amount, an error message is displayed. In addition, means for canceling the transaction or requesting re-input of the amount may be arranged. Further, the center stores, for example, a balance storage means for storing the balance of the electronic money card, and a transaction amount indicated by the cashing request message received from the electronic money card in the balance storage means. Balance updating means for subtracting from the balance of the electronic money card. In this case, the center determines whether or not the transaction amount indicated by the cashing request message received from the electronic money card is equal to or less than the balance of the electronic money card stored in the balance storage means, and Means for transmitting, to the terminal, an instruction message instructing that the transaction should be stopped or re-entered if the transaction amount is less than the transaction amount.
With such a configuration, the security of the transaction can be improved.

The transaction history information includes, for each transaction, a transaction type, a transaction date, information for specifying the terminal that has processed the transaction, and a transaction amount. By tracking these pieces of information, it is possible to determine an unauthorized part. In this case, it is desirable to store all the transaction histories of the electronic money card in the write-once type storage unit.

[0010] The history of all transactions made with the electronic money card may be stored in the center.

At least one of the write-once type storage unit and the IC memory unit of the electronic money card stores a card identification code of the electronic money card, and the redemption request message includes the card identification code of the electronic money card. Wherein the center comprises: an unauthorized card ID storage means for storing the card identification code of the electronic money card whose use is not permitted as an unauthorized card ID; and the card identification code and the unauthorized card ID included in the cashing request message. A means may be provided for comparing the fraudulent card ID stored in the storage means and stopping the transaction when a matching fraudulent card ID is detected. According to such a configuration, when a registered accident card or the like is used, it can be detected and the transaction can be stopped.

[0012] The terminal stores a terminal identification code, the cashing request message includes the terminal identification code, and the center stores the terminal identification code of the terminal whose use is not permitted as an unauthorized terminal ID. A terminal ID storage unit, a unit for comparing the terminal identification code included in the cashing request message with the unauthorized terminal ID stored in the unauthorized terminal ID storage unit, and stopping a transaction when a matching unauthorized terminal ID is detected. May be provided. According to such a configuration, when a registered accident terminal or the like is used, it can be detected and the transaction can be stopped.

[0013] A personal public key and / or
Alternatively, a certificate authority that gives a card identification code and determines whether the personal public key and / or the card identification code is registered in the system may be arranged.

[0014] The IC memory section of the electronic money card includes a pair of personal public keys and a personal secret key, the terminal includes a pair of terminal public keys and a terminal secret key, and the cashing request message relates to a transaction. Information, a first authenticator generated using the personal secret key of the electronic money card, information relating to the transaction and a second authenticator generated using the terminal secret key of the terminal, The bank computer includes a personal public key and the terminal public key, the bank computer determines whether the first and second authenticators match using the personal public key and the terminal public key, Only if
A process for performing cash conversion may be executed. According to such a configuration, unauthorized use of the electronic money card can be detected more accurately.

[0015] The transaction history information stored in the write-once type storage unit of the electronic money card may not include information for specifying the electronic money card. According to such a configuration, the capacity of the write-once storage unit can be used effectively.

Whether or not the operator has authority to use the electronic money system may be determined based on the physical characteristics of the operator.

The write-once type storage unit is composed of, for example, an optical storage unit in which data is written and physical pits are formed by irradiating light energy and data cannot be rewritten.

An electronic money system according to a second aspect of the present invention includes a plurality of terminals, a center connected to the plurality of terminals via a communication line, a bank computer connected to the center via a communication line, An electronic money system, comprising: an electronic money transaction file that stores information about a monetary value;
The terminal includes an input unit for inputting an instruction of a transaction of electronic money including a realization and a transaction amount, and a conversion request message based on the realization instruction and the transaction amount among the transaction instructions input by the input unit. Means for transmitting to the center;
Means for writing a transaction history related to the cashing process in the electronic money transaction file in response to the cashing completion message from the center, wherein the center transmits a transfer instruction message based on the cashing request message from the terminal. Means for transmitting to the bank computer, and means for transmitting the cashing completion message to the terminal in response to a transfer completion message from the bank computer, the bank computer comprising:
Transfer means for transferring the transaction amount indicated by the transfer instruction message from the center from a predetermined account to the account specified by the transfer instruction message, and transmitting the transfer completion message to the center when the transfer by the transfer means is completed. Means to perform.

According to such a configuration, the user can substantially convert the electronic money by transferring the electronic money stored in the electronic money transaction file to his / her own account.

The electronic money transaction file may be stored in a medium having a write-once storage unit and an IC memory unit. In this case, by recording the transaction history in the write-once type storage unit, when an abnormality occurs, the recorded contents of the write-once type storage unit can be verified and fraudulent acts can be easily detected. The medium can take any shape, such as a card, box, disk, notebook, notebook, and the like. Further, the medium storing the electronic money transaction file may be arranged in the terminal.

[0021]

An electronic money system according to an embodiment of the present invention will be described below with reference to the drawings. This electronic money system, as shown in FIG.
Certificate Authority 11 and Electronic Money Server 1
3, an electronic money terminal (transaction device) 15, a bank center 17, and an electronic money card 19.

The center 10 is a computer system that controls (manages) the operation of the entire electronic money system and the distribution of electronic money. The certificate authority 11 of the center 10 generates authentication information for a user or the like in the electronic money system. The certificate authority 11 stores card IDs and public keys of all the electronic money cards 19 used in this system in order to check that the user is registered when performing authentication.

The electronic money server 13 generates a pair of center secret key Ck1 and center public key Ck2, and copies the center secret key Ck1 to the certificate authority 11, thereby sharing the center secret key Ck1 in the center 10. . Further, the electronic money server 13 transmits the center public key Ck2 to each electronic money terminal 15.
Etc. in advance. Further, the electronic money server 13 generates and stores a signature key Sk for generating a signature included in the personal authentication information described later and an inspection key Ek for confirming the signature made using the signature key Sk. Then, the inspection key Ek is distributed to each electronic money terminal 15 in advance.

As shown in FIGS. 2 and 3, the electronic money server 13 stores a balance table indicating the balance of the electronic money held by each electronic money card 19, and a list of card IDs of the electronic money cards 19 that have become unusable. (Accident card list), terminal ID of electronic money terminal 15 that has become unusable
(Accident terminal list) and a list of transaction history of electronic money (transaction history table).

The electronic money server 13 uses these stored data to send an authentication request to the certificate authority 11 and the bank center 1.
7 and controls and manages the transactions of each electronic money card 19, electronic money terminal 15, and electronic money.

The electronic money terminal 15 is a terminal through which a user inserts or inserts the electronic money card 19 and performs a predetermined operation to make a transaction for electronic money. The electronic money terminal 15 has a charge terminal (AT) for replenishing (charging) electronic money to the electronic money card 19.
M), a terminal that processes the transfer of electronic money between electronic money cards, a POS terminal that is arranged in a store or the like and receives electronic money corresponding to the sales amount of goods or services, a vending machine, and the like. One terminal may have a plurality of functions related to electronic money, for example, an ATM function and a POS function.

Each electronic money terminal 15 has a storage unit 30,
An input unit 31, a display unit 32, and a card processing unit 33 are provided.

The storage unit 30 is supplied from the electronic money server 13 with the terminal ID assigned to the electronic money terminal 15, a pair of terminal secret keys Tk1 and terminal public key Tk2 generated by the electronic money terminal. The inspection key Ek and the center public key Ck2 for confirming the personal authentication information and the electronic money transaction history of the center 10 when it is offline are stored.

The input unit 31 inputs an instruction for an electronic money transaction. The display unit 32 displays a processing menu, a message, and the like. The card processing unit 33 is a part of the electronic money card 19
The electronic money card 19 includes an insertion slot, an IC read / write unit for accessing the IC unit 20 of the electronic money card 19, and an optical storage read / write unit for accessing the optical storage unit 21.

FIG. 4A shows an ATM-type electronic money terminal 1.
5 is shown. The input unit 31 and the display unit 32 of the electronic money terminal 15 include a touch panel type display unit 34, and the card processing unit 33 includes card insertion ports 35A and 35B into which the electronic money card 19 is inserted. In the card insertion slot 35A, a transfer source card for normal processing and transfer of electronic money is inserted. The card of the transfer destination at the time of transfer of the electronic money is inserted into the card insertion slot 35B.

FIG. 4B shows a POS type electronic money terminal 1.
5 is shown. The input unit 31 of the electronic money terminal 15
Includes a keyboard 31A, a barcode reader 31B, and the like for inputting a sales amount and the like together with an electronic money transaction instruction and the like. In addition, the display unit 32 displays a sales amount and the like together with a message and the like for electronic money transactions,
A display unit 32A for the customer and a display unit 32B for the operator are provided. The card processing unit 33 has a card insertion slot 35. Further, a cash drawer 36 and the like are arranged for POS.

The bank center 17 has an electronic money card 19
A settlement account, which is an account of a user (holder), and a separate account, which is an operation account for electronic money held by a bank, and perform deposit / withdrawal processing of these accounts. For example, bank center 17
Is an electronic money card 1 according to an instruction from the center 10.
The transfer from the settlement account corresponding to 9 to another account and the transfer from another account to the settlement account are performed. To perform this transfer process, the bank center 17 prepares an account table that associates the card ID assigned to each electronic money card 19 with the account number of the settlement account of the user (holder) of each electronic money card 19. Stored as shown in FIG.

As shown in FIG. 6, the electronic money card 19 comprises an optical IC hybrid card having an IC section (IC chip) 20 and an optical storage section 21. The electronic money card 19 only needs to include an IC unit (IC chip) 20 and an optical storage unit 21. The shape is not limited to a card type, and various shapes such as a notebook, a notebook, a box, and a disk are available. It is possible.

The IC section 20 contains a control circuit and a memory circuit. As shown in FIG. 6, this memory circuit stores, in addition to the operation program, a card ID, a personal secret key Pk1, a personal public key Pk2, a balance of electronic money, personal authentication information for online transactions described later, and the like. . Also, the IC unit 20
Of the transaction histories stored in the optical storage unit 21 described later, a final transaction pointer indicating the position of the final transaction history and a transmitted pointer indicating the position of the transaction history last transmitted to the electronic money server 13 are stored. .

The optical storage unit 21 is composed of, for example, a non-rewritable write-once storage medium of a type in which data is written by forming pits or the like by irradiating light energy. The transaction history of the electronic money traded is sequentially stored.

Items constituting the transaction history include usage categories (recharge (replenishment of balance), payment, transfer, cashing, etc.) indicating the type of transaction of electronic money, and electronic money with an electronic money card attached for transaction. Terminal I of money transaction terminal 15
D, In the case of transfer of electronic money between the electronic money cards 19, the card ID of the other party, the date of use, the transaction amount, the authenticator (the transaction authenticator created using the above item and the personal secret key Pk1, the above item And a business partner authenticator created using the secret key Pk1 of the business partner (the electronic money terminal 15 or another electronic money card 19).

The basic processing in the electronic money system having such a configuration includes (1) electronic money charging processing (replenishment of the balance stored in the electronic money card 19), (2) personal authentication information issuing processing, There are (3) electronic money payment processing, (4) matching processing, (5) electronic money transfer processing, (6) electronic money realization processing, and the like. These processes will be described below in order.

(1) Electronic Money Charge Processing The electronic money charge processing will be described with reference to FIG. A
The electronic money terminal 15 having the TM function displays a process selection menu as shown in FIG. The user selects “1) Charge electronic money” from the processing menu displayed on the display unit 32 (the touch panel 34).

In response to this selection, the electronic money terminal 15
Displays a message indicating that the electronic money card 19 should be inserted into the card insertion slot 35A, as shown in FIG. 8B.

When the electronic money card 19 is inserted, the electronic money terminal 15 displays a money amount input screen as shown in FIG. 8C, and the user operates the input unit 31 (touch panel 3).
Enter the desired charge amount from 4). When the charge amount is input, the electronic money terminal 15 stores the transaction information including the transaction type (charge), the use date and the transaction amount (charge amount) and the terminal I in the electronic money card 19.
D, and a request signal requesting transmission of the card ID and the personal public key Pk2 (P1).

The IC unit 20 of the electronic money card 19 adds the card ID to the terminal ID and the transaction information, and uses the personal secret key Pk1 to transfer the information to the transaction authenticator {Pk1 (terminal ID).
+ Transaction information + card ID), and the transaction authenticator, card ID and personal public key Pk2 are converted to the electronic money terminal 15.
(P2).

The electronic money terminal 15 receives the card I
D, the transaction information and the terminal ID are added, and the customer authenticator @ Tk1 (terminal ID + transaction information + card I) using the terminal secret key Tk1.
D) Create｝. The electronic money terminal 15 uses the created supplier authenticator @ Tk1 (terminal ID + transaction information + card I
D) Instructs the charge of the requested amount and the charge request message including the terminal public key Tk2, the card ID of the electronic money card 19, the personal public key Pk2, and the transaction authenticator. (P3). The charge request message includes the terminal ID of the electronic money terminal 15 of the transmission source.

The electronic money server 13 stores the received card ID and terminal ID in the accident card list (FIG. 2B) and the accident terminal list (FIG. 2) stored in the storage unit 30.
It is determined whether (C) is registered. If it is determined that the received card ID and terminal ID are not registered in these lists, the electronic money server 13
Using the received personal public key Pk2, the transaction authenticator {Pk1 (terminal ID + transaction information + card ID)} is converted into a terminal ID, transaction information, and a card ID. Further, using the received terminal public key Tk2, the supplier authenticator {Tk1 (terminal ID + transaction information + card ID)} is converted into a terminal ID, transaction information, and a card ID. Furthermore, the terminal ID converted from the transaction authenticator
It is determined whether the transaction ID, the transaction information, the card ID, the terminal ID converted from the supplier authenticator, the transaction information, and the card ID match. If these match completely, the electronic money server 13 determines that the transaction authenticator and the business partner authenticator are correct, and transfers the amount indicated from the settlement account corresponding to the card ID to another account of the bank center 17. A withdrawal message instructing to move (withdraw) is transmitted to the bank center 17 (P4).

If at least one of the received card ID and terminal ID is registered in the accident card list and the accident terminal list, or the terminal ID converted from the transaction authenticator and the business partner authenticator, the transaction information and the card If at least a part of the ID does not match, the electronic money server 13
Transmits a message indicating that charging is not possible to the electronic money terminal 15 and notifies the administrator or the like of the detection of fraud by displaying a message or the like. The electronic money terminal 15 displays a message to the effect that charging cannot be performed on the display unit 32.

The bank center 17 has the electronic money server 13
When the payment message is received, the account number corresponding to the card ID is determined with reference to the account table shown in FIG. Next, the balance of the settlement account of this account number is checked, and it is determined whether or not the balance is equal to or more than the designated amount. If the balance is determined to be greater than or equal to the amount indicated,
It is determined that withdrawal is possible, and the designated amount is moved (transferred) from the settlement account to another account (P5). Next, a withdrawal completion message notifying the completion of the transfer is sent to the electronic money server 13.
(P6).

When it is impossible to withdraw money due to the shortage of the balance of the settlement account, the bank center 17 transmits a message instructing that charging is impossible to the electronic money server 13. The electronic money server 13 stops the charging process and transmits a similar message to the electronic money terminal 15. In response to this message, the electronic money terminal 15 displays a message to that effect on the display unit 32 or the like.

When receiving the withdrawal completion message from the bank center 17, the electronic money server 13 transmits the card ID of the electronic money card 19 and the personal public key Pk2 stored in the storage unit 30 to the certificate authority 11, and (P7). The certificate authority 11 checks whether the received card ID and personal public key Pk2 are registered in the list of the card ID and personal public key Pk2 stored therein. If they are registered, the certificate authority 11
Using the center secret key Ck1, the received card ID and personal public key Pk2 are authenticated as {Ck1 (card ID + Pk2)}.
And sends it back to the electronic money server 13 together with the authentication completion message (P8).

When the electronic money server 13 receives the authentication completion message and the authentication information {Ck1 (card ID + Pk2)}, the electronic money server 13 stores the electronic money stored in the electronic money card 19 on the balance table shown in FIG. Update the balance data indicating the balance. Furthermore, as shown in FIG. 3, the transaction information (use category (charge), use date, transaction amount), card ID, terminal ID, and authenticator (transaction authenticator and supplier authenticator) Is added to the past transaction history and stored. Next, the electronic money server 1
No. 3 adds the authentication information from the certificate authority 11 to the current transaction history, and transmits it to the electronic money terminal 15 together with a charge completion message indicating the completion of the charge (P9).

When receiving the transaction history and the authentication information, the electronic money terminal 15 converts the authentication information into a card ID and a personal public key Pk2 using the center public key Ck2, and checks it. If the authentication information is confirmed to be correct, the balance recorded in the memory area of the IC unit 20 is updated via the control unit of the IC unit 20 based on the received transaction history.

The electronic money terminal 15 is connected to the IC section 20.
The last transaction pointer is read from the address, and the current transaction history ｛transaction information (use category (charge), date of use, transaction amount), card ID, terminal ID, and authentication are stored at the address following the position indicated by the last transaction pointer. The child (transaction authenticator and supplier authenticator)｝ is added to the past transaction history and stored.
Further, the electronic money terminal 15 updates the final transaction pointer and the transmitted pointer recorded in the memory area of the IC unit 20 via the control unit of the IC unit 20 so as to indicate the position of the transaction history added ( P10). Thereafter, the terminal 15 displays that the charging is completed on the display unit 32 and ejects the electronic money card 19.

This electronic money charging process is performed by the user A
Uses the electronic money terminal 15B (terminal ID “T150”) and uses its own electronic money card 19A (card ID ”).
C99 ") will be described with reference to Fig. 9 as an example, in which electronic money for 10,000 yen is charged.
From the processing menu displayed on the display unit 32, select "1) Charge electronic money", insert the electronic money card 19A into the electronic money terminal 15B, and enter "10,000 yen" as the charge amount.

In response to this input, the electronic money terminal 15B stores the transaction information including the transaction category (charge), the date of use, and the transaction amount, the terminal ID “T150”, the card ID and the personal public key. The request is transmitted to the electronic money card 19A together with a request signal requesting Pk2 (L1).

The electronic money card 19A adds the card ID “C99” to the received terminal ID “T150” and the transaction information, and uses the personal secret key Pk1A to make the transaction authenticator {Pk1A.
(T150 + transaction information + C99) is created. The electronic money card 19A generates the transaction authenticator $ Pk1A (T
150 + transaction information + C99)｝ with card ID “C99”
Is transmitted to the electronic money terminal 15B together with the personal public key Pk2A (L2).

The electronic money terminal 15B has the card ID "C
99 "and the transaction information stored in the storage unit 30 as the terminal ID.
, And using the terminal secret key Tk1B, the supplier authenticator {Tk1
B (T150 + transaction information + C99)} is created. The electronic money terminal 15B uses the created supplier authenticator @ Tk1B
(T150 + transaction information + C99) and requesting the charge of 10,000 yen of electronic money, and the terminal ID “T15
Charge request message including “0” and the terminal public key Tk2B;
The card ID “C99” of the electronic money card 19A, the personal public key Pk2A, and the transaction authenticator {Pk1A (T150 + transaction information + C99)} are transmitted to the electronic money server 13 (L3).

The electronic money server 13 receives the received terminal I
Unauthorized use of the electronic money terminal 15 and the electronic money card 19 is checked by determining whether D "T150" and the card ID "C99" are registered in the accident terminal list and the accident card list.

As a result of the check, the electronic money card 19A
If it is determined that the electronic money terminal 15B is neither an accident card nor an accident terminal, the electronic money server 1
3 uses the personal public key Pk2A to assign the transaction authenticator to the terminal ID.
And transaction information and a card ID. Further, using the terminal public key Tk2B, the supplier authenticator is converted into a terminal ID, transaction information, and a card ID. Next, it is determined whether or not the terminal ID converted from the transaction authenticator, the transaction information, and the card ID completely match the terminal ID converted from the supplier authenticator, the transaction information, and the card ID. If these match completely, the electronic money server 13 determines that the transaction authenticator and the business partner authenticator are correct, and sends to the bank center 17 the one from the settlement account of the card ID “C99” to another account of the bank center 17. A withdrawal message instructing to move 10,000 yen is transmitted (L4).

When both or one of the electronic money card 19A and the electronic money terminal 15B is determined to be an accident card or an accident terminal, and / or a terminal ID converted from the transaction authenticator and the business partner authenticator and the transaction If the information and the card ID do not match each other, the electronic money server 13 transmits a message to the effect that charging cannot be performed to the electronic money terminal 15B, and notifies the administrator of the detection of fraud or abnormality.

When receiving the withdrawal message, the bank center 17 refers to the account table shown in FIG.
Search for the account number "30000001" of the settlement account 99 "and determine whether or not the balance of the corresponding account number is equal to or more than the designated charge amount of 10,000 yen. If the balance is less than 10,000 yen, The bank center 17 transmits to the electronic money server 13 a message indicating that the balance cannot be charged because the balance is insufficient.If the balance is 10,000 yen or more, the bank center 17 moves the settlement account "300000001" to another account of the bank center 17. Is transferred to the electronic money server 13 (L5).

The electronic money server 13 is provided at the bank center 17
Receives a withdrawal completion message from the electronic money card 19
An authentication grant request for authentication of the card ID of A and the personal public key Pk2A is transmitted to the certificate authority 11 together with the card ID "C99" and the personal public key Pk2A (L6).

The certificate authority 11 adds the received card ID “C99” and the personal public key P to the list of the card ID of the electronic money card 19A and the personal public key Pk2 stored therein.
k2A exists (that is, registered in the certificate authority 11)
Check that. When the card ID “C99” and the personal public key Pk2A are registered in the certificate authority 11, the certificate authority 11 uses the center secret key Ck1 to
D “C99” and authentication information ΔC for personal public key Pk2A
k1 (C99 + Pk2A)}, and transmits it to the electronic money server 13 together with an authentication completion message indicating the completion of authentication (L
7).

When the electronic money server 13 receives the authentication completion message, the usage category “charge”, date of use, card ID “C99”, terminal ID “T150”, charge amount “10,000 yen”, transaction authenticator , And a transaction history is generated by a supplier authenticator and stored as shown in FIG. Further, 10,000 yen is added to the balance of the card ID “C99” in the balance table shown in FIG. Further, authentication information from the certificate authority 11 is added to the generated transaction history, and transmitted to the electronic money terminal 15B together with the charge completion message (L8).

When the electronic money terminal 15B receives the transaction history with the authentication information, the electronic money terminal 15B converts the authentication information {Ck1 (C99 + Pk2A)} to the card I using the center public key Ck2.
D is converted to "C99" and the personal public key Pk2A and checked. If the authentication information is confirmed to be correct, the received transaction history is stored in the IC section 20 of the electronic money card 19A.
(L9). The IC unit 20 adds 10,000 yen to the balance stored by itself based on the received transaction history.

The electronic money terminal 15 B is provided in the IC section 2.
The last transaction pointer is read from 0, the transaction history is added to the position next to the position indicated by the last transaction pointer in the optical storage unit 21, and the last transaction pointer and the transmitted pointer are updated to indicate the added transaction history. Then, the terminal 15B
Displays on the display unit 32 that charging has been completed, and ejects the electronic money card 19A. In this way, the user A can charge his / her own electronic money card 19A with electronic money for 10,000 yen.

(2) Personal Authentication Information Issuing Process Next, the process of issuing personal authentication information stored in the IC section 20 of the electronic money card 19 (personal authentication information issuing process) will be described. In the offline electronic money payment process described later, the electronic money card 19 can present a transaction to the electronic money terminal 15 by presenting the personal authentication information to the electronic money terminal 15 and receiving confirmation of the personal authentication information by the electronic money terminal 15. Becomes Personal authentication information is electronic money card 1
Since it is created based on the card ID and the personal public key Pk2 of 9, the private secret key Pk1 and the personal public key Pk2 need to be obtained every time they are changed.

FIG. 10 shows a schematic diagram of the personal authentication information issuing process. First, as shown in FIG. 8A, from the processing menu displayed on the display unit 32, "4) Issuing personal authentication information"
Is selected, and the electronic money card 19 is
5 is inserted. In response to this operation, the electronic money terminal 15 sends the card I to the IC section 20 of the electronic money card 19.
A request signal indicating a request for D and the personal public key Pk2 is transmitted (P11).

In response to the request signal, the IC section 20 of the electronic money card 19 transmits the card ID and the personal public key Pk2 to the electronic money terminal 15 (P12). The electronic money terminal 15 transmits the received card ID and personal public key Pk2 to the electronic money server 13 together with an authentication information issuance request for requesting personal authentication information (P13). Note that the authentication information issuance request includes the terminal ID.

When the electronic money server 13 receives the card ID, the personal public key Pk2, and the authentication information issuance request from the electronic money terminal 15, the received card ID and terminal ID are registered in the accident card ID list and the accident terminal ID list. Check if it is.

As a result of the check, if at least one of the received card ID and terminal ID is registered in the accident card ID list or the accident terminal ID list, the electronic money server 13 issues personal authentication information to the electronic money terminal 15. In addition to transmitting a message to the effect that it is not possible, the administrator is notified by message display or the like of the detection of fraud. The electronic money terminal 15 displays this message.

If the received card ID and terminal ID are not registered in the accident card ID list and the accident terminal ID list, the electronic money server 13
D, a request for issuing a personal public key Pk2 and personal authentication information (a request for issuing personal authentication information) is transmitted to the certificate authority 11 (P14).

Upon receiving the card ID, the personal public key Pk2, and the request for issuing personal authentication information from the electronic money server 13, the certificate authority 11 registers the received card ID and the personal public key as being usable in the present system.

After registering the received card ID and personal public key Pk2, the certificate authority 11 assigns a signature Sk (card ID + Pk2) created (encrypted) using the signature key Sk to the card ID and the personal public key Pk2. By doing so, the personal authentication information {(card ID + Pk2) + Sk (card ID + Pk2)}
Is generated and transmitted to the electronic money server 13 together with the issuance completion message (P15). Note that (Card ID + Pk2) may be compressed, and data converted using a hash function and encrypted with a signature key Sk may be used as a signature.

The electronic money server 13 transmits the personal authentication information {(card ID + Pk2) + Sk (card ID + Pk2)} and the issuance completion message from the certificate authority 11 to the electronic money terminal 15 (P16). The electronic money terminal 15 receives the personal authentication information ｛(card ID + Pk2) + Sk (card I
D + Pk2)} to the IC section 20 of the electronic money card 19 (P17). The IC unit 20 receives the personal authentication information ｛(card ID + Pk2) + Sk (card ID + Pk
2) Store｝ in the storage circuit. Thereafter, the electronic money terminal 15 displays on the display unit 32 that the acquisition of the personal authentication information has been completed.
And the electronic money card 19 is ejected.

This personal authentication information issuance processing is performed, for example, when the user A executes the electronic money card 19A (card ID “C9
An example in which the personal authentication information of 9 ″) is acquired will be described with reference to FIG.

First, the user A selects “4) Issue personal authentication information” from the menu displayed on the display unit 32, and inserts the electronic money card 19A into the electronic money terminal 15B. In response to this operation, the electronic money terminal 15B transmits a request signal requesting transmission of the card ID and the personal public key to the electronic money card 19A (L11).

The IC section 20 of the electronic money card 19A
When the request signal is received from the electronic money terminal 15B, the card ID "C99" and the personal public key Pk2A are transmitted to the electronic money terminal 15B (L12). Electronic money terminal 15B
Is the received card ID "C99" and the personal public key Pk2A
Is transmitted to the electronic money server 13 together with the authentication information issuance request (L13).

The electronic money server 13 compares the received card ID “C99” and the personal public key Pk2A with the accident card I
By determining whether the electronic money card 19 and the electronic money terminal 15 are registered in the D list and the accident terminal ID list, unauthorized use of the electronic money card 19 and the electronic money terminal 15 is checked. If it is determined that the unauthorized use has occurred, the electronic money server 13 transmits a message to the effect that the personal authentication information cannot be issued to the electronic money terminal 15B, and notifies the administrator of the fraud detection by displaying a message or the like. The electronic money terminal 15B displays this message.

As a result of the check, the electronic money card 19A
And if the electronic money terminal 15B can be used, the card I
D “C99” and the personal public key Pk2A are transmitted to the certificate authority 11 together with a request for issuing personal authentication information (L14).

The certificate authority 11 registers the card ID “C99” and the personal public key Pk2A received from the electronic money server 13 as being usable in this system. After registering the card ID “C99” and the personal public key Pk2A, the certificate authority 11 generates a digital signature by encrypting them with the signature key Sk, and gives the card ID “C99” and the personal public key Pk2A. By the personal authentication information ｛(C
99 + Pk2A) + Sk (C99 + Pk2A)},
The message is transmitted to the electronic money server 13 together with the issuance completion message (L15).

The electronic money server 13 transmits the personal authentication information ｛(C99 + Pk2A) + Sk (C99 +
Pk2A) and the issuance completion message are transmitted to the electronic money terminal 15 (L16). The electronic money terminal 15 receives the personal authentication information {(C99 + Pk2) received from the electronic money server 13.
A) + Sk (C99 + Pk2A)｝ is converted to an electronic money card 1
9A (L17). The IC unit 20 of the electronic money card 19A receives the personal authentication information ｛(C99 + Pk2A) + Sk (C99 + Pk2
A)｝ is stored. After that, the electronic money terminal 15B
The completion of the acquisition of the personal authentication information is displayed on the display unit 32 and the electronic money card 19A is ejected.

The personal authentication information may be automatically obtained via the electronic money terminal 15 when the personal secret key Pk1 and the personal public key Pk2 are changed by the electronic money terminal 15.

(3) Electronic Money Payment Processing Next, electronic money payment processing will be described with reference to FIG. This process is performed, for example, in a store or the like,
This is a process for purchasing a service or the like and paying the fee by electronic money. The electronic money terminal 15 is, for example, as shown in FIG.
It takes the form of a POS terminal, a vending machine, or the like as shown in FIG.

For example, the POS terminal type electronic money terminal 15
After calculating the sales amount, a message indicating that the payment method should be selected is displayed on the display unit 32. Here, when the payment by the electronic money card is selected, FIG.
Is displayed, and the electronic money card 19 is inserted into the electronic money terminal 15 as shown in FIG.

In response to the insertion of the electronic money card 19, the electronic money terminal 15 receives the transaction information including the transaction type, the use date and the transaction amount (payment amount), and the terminal ID.
And a request signal for requesting transmission of the balance, the card ID, the personal public key Pk2, the personal authentication information {(card ID + Pk2) + Sk (card ID + Pk2)}, and transmits the request signal to the electronic money card 19 (P21).

The IC unit 20 of the electronic money card 19 adds the card ID to the received terminal ID and transaction information, and creates a transaction authenticator {Pk1 (terminal ID + transaction information + card ID)} using the personal secret key Pk1. I do. The IC unit 20 creates the transaction authenticator $ Pk1 (terminal ID + transaction information + card I
D) {} is replaced by the card ID, the personal public key Pk2 and the personal authentication information {(card ID + Pk2) + Sk (card ID + Pk2)}.
And the balance are transmitted to the electronic money terminal 15 (P22).

The electronic money terminal 15 sends the card ID, the personal public key Pk2 and the personal authentication information {(card ID + Pk2) + Sk (card ID + Pk2)} from the electronic money card 19.
, The balance and the transaction authenticator {Pk2 (terminal ID + transaction information + card ID)}, first, the personal authentication information {(card ID + Pk2) + Sk (card ID + Pk2)}
The digital signature Sk (card ID + Pk2) given to the card ID and the personal public key Pk2 is decrypted using the inspection key Ek,
It is determined whether or not the signed card ID matches the personal public key Pk2. If they do not match, the electronic money terminal 15 determines that there is some fraud, displays a message indicating that the transaction is not possible, and notifies the electronic money server 13 of the fraud detection.
Notify.

The electronic money terminal 15 converts the card ID decrypted from the signature using the inspection key Ek and the personal public key Pk2 into
When it is determined that the signed card ID matches the personal public key Pk2, it is determined whether the received balance is equal to or more than the payment amount. If the balance is equal to or more than the payment amount, it is determined that payment is possible, and the transaction authenticator @ Tk1 (terminal ID +
(Transaction information + card ID)} is generated. The electronic money terminal 15 obtains a transaction history from the transaction information, card ID, terminal ID, transaction authenticator {Pk2 (terminal ID + transaction information + card ID)} and supplier authenticator {Tk1 (terminal ID + transaction information + card ID)}. Is transmitted to the electronic money card 19 together with the payment completion message (P23), and further stored in its own storage unit 30.

The IC section 20 of the electronic money card 19 updates the balance stored in the storage circuit based on the received transaction history and transfers the value of the final history pointer to the electronic money terminal 15. The electronic money terminal 15 writes a transaction history at the address next to the address indicated by the final history pointer of the optical storage unit 21 of the electronic money card 19 and sends a command to the IC unit 20 to update the final history pointer. In response to this command, the IC unit 20 updates the value of the last transaction pointer stored in the storage circuit. However, the value of the transmitted pointer is not updated. Thereafter, the electronic money terminal 15 displays that the payment has been completed and ejects the electronic money card 19.

As described above, this electronic money payment processing is an offline processing performed between the electronic money card 19 and the electronic money terminal 15. As a result, the processing speed can be improved, the response can be made faster, and the waiting time of the customer can be reduced.

The electronic money terminal 15 communicates with the electronic money server 13 at a predetermined timing, and transmits the transaction history stored in the storage unit 30. Electronic money server 13
Stores the received transaction history in the transaction history table as shown in FIG. The timing at which the electronic money terminal 15 transmits the transaction history to the electronic money server 13 is preferably, for example, a timing immediately after the electronic money payment processing is completed. However, the present invention is not limited to this, and may be arbitrary, for example, every fixed period (for example, every 10 minutes), in response to polling from the electronic money server 13, and the like.

After transmitting the transaction history stored in the storage unit 30 to the electronic money server 13, the electronic money terminal 15 may delete the transmitted transaction history or add a transmitted flag or the like. Thus, the transmitted transaction history and the untransmitted transaction history may be managed separately.

The electronic money payment processing is performed, for example, when the user A determines that the electronic money terminal 15B whose terminal ID is “T150”
Is purchased at the store where is installed, and the payment is made to the electronic money card 19A (card ID "C9
9 ") will be described as an example with reference to Fig. 13. First, the amount" 10,000 yen "is displayed as a payment amount on the display unit 32 of the electronic money terminal 15B (for example, a POS terminal), and First, assume that payment by electronic money is selected, first, the user A or a clerk inserts the electronic money card 19A into the electronic money terminal 15B.

In response to the insertion of the electronic money card 19A, the electronic money terminal 15B responds to the insertion of the electronic money card 19A with transaction information including a transaction category, a transaction date and a transaction amount, and a terminal ID "T15.
0 ", a card ID" C99 ", a personal public key Pk2, personal authentication information, and a request signal for requesting transmission of the balance are transmitted to the electronic money card 19A (L21).

The electronic money card 19A adds the card ID “C99” to the received terminal ID “T150” and the transaction information, and uses the personal secret key Pk1A to make the transaction authenticator {Pk1A}.
(T150 + transaction information + C99) is created. The electronic money card 19A uses the created transaction authenticator @ Pk2A (T
150 + transaction information + C99) and the card ID “C9
9 ", the personal public key Pk2A, and the personal authentication information $ (C99
+ Pk2) + Sk (C99 + Pk2)} and the balance are transmitted to the electronic money terminal 15 (L22).

The electronic money terminal 15B receives the card ID “C99” and the personal public key Pk2 from the electronic money card 19A.
A and personal authentication information $ (C99 + Pk2) + Sk (C99 +
Pk2)}, the balance and the transaction authenticator {Pk1A (T150 + transaction information + C99)}, and the signature Sk (C99 + Pk2) of the personal authentication information is stored in the inspection key Ek.
Is decrypted using. Next, the decrypted one is the card ID “C” of the electronic money card 19A to which the signature has been given.
99 "and the personal public key Pk2A.

Next, the electronic money terminal 15B stores the balance of the electronic money card 19A in the payment amount (in this case, 10,000 yen).
It is determined whether or not this is the case. If the balance is 10,000 yen or more, the electronic money terminal 15B uses the terminal secret key Tk1B for the terminal ID “T150”, the transaction information, and the card ID “C99” to authenticate the customer counterpart {Tk1B (T150 + transaction information + C9).
9) Generate｝. Further, the terminal ID “T150”, the transaction information, the card ID “C99”, and the transaction authenticator @ Pk1A
(T150 + transaction information + C99)} and supplier authenticator {T
A transaction history is constructed from k1B (T150 + transaction information + C99) @, and the electronic money card 19A together with the payment completion message.
(L23). The transaction history is also stored in its own storage unit 30. After that, the electronic money terminal 15B
The electronic money card 19A is ejected while displaying that the payment is completed.

The IC section 20 of the electronic money card 19A
Based on the transaction history received from the electronic money terminal 15B, the balance is subtracted by 10,000 yen and the value of the final transaction pointer is transmitted to the electronic money terminal 15B. The electronic money transaction terminal 15B stores the transaction history at the address next to the address indicated by the last transaction pointer in the optical storage unit 21. Thereafter, the value of the final read pointer is updated in the IC unit 20 so as to indicate the next address position. However, the value of the transmitted pointer is not updated.

On the other hand, if it is determined that the signature obtained by decrypting the signature with the inspection key Ek does not match the card ID “C99” of the electronic money card 19A and the personal public key Pk2A, the electronic money terminal 15B authenticates the electronic money card 19A. It is determined that the card is a card and a message to the effect that payment is impossible is displayed on the display unit 32
And notifies the electronic money server 13 of the fraud detection. If the balance of the electronic money card 19A is less than 10,000 yen, the electronic money terminal 15B displays a message on the display unit 32 that payment is not possible due to insufficient balance.

The electronic money terminal 15B transmits the transaction history stored in the storage unit 30 to the electronic money server 13 after completing the payment processing. When the electronic money server 13 receives the transaction history, as shown in FIG.
Store in transaction history table. Electronic money terminal 15B
After the transmission of the transaction history stored in the transaction history storage unit 30 from the electronic money server 13 is completed, the transmitted transaction history may be deleted, or the transmission may be performed by adding a transmitted flag or the like. The transaction history that has already been transmitted and the transaction history that has not been transmitted may be managed separately.

In the above description, the payment process is performed offline. However, in order to enhance security, if the transaction amount is a certain amount or more, it may be processed online. A limit may be set. The electronic money terminal 15 also has the same “terminal authentication information” as the personal authentication information of the electronic money card 19,
Sends its own terminal authentication information to the electronic money card 19,
Confirmation may be received. In this case, the electronic money card 19 includes a check key for checking (checking) the signature included in the terminal authentication information. In this system, when the personal authentication information and the terminal authentication information between the electronic money card 19 and the electronic money terminal 15 are mutually confirmed to be correct, it is possible to conduct a transaction. Can be.

(4) Matching Process When the payment process or the like is executed, a transaction history not transmitted to the electronic money server 13 is generated in the electronic money card 19. These transaction histories are transmitted to the electronic money server 13 prior to the processing when online processing (for example, electronic money charging processing) is performed. The electronic money server 13 includes an electronic money card 19
When the transaction history is received via the electronic money terminal 15 from the electronic money terminal 15, the validity of the transaction history is checked by comparing the transaction history with the transaction history stored therein. The outline of the matching process will be described with reference to FIG.

Upon receiving the signal from the electronic money terminal 15, the IC section 20 of the electronic money card 19 determines the content of the process indicated by the received signal, and determines whether or not it indicates an online process. I do.

For example, “1) Charge electronic money” is selected from the processing menu, and the electronic money card 19 is selected.
Is inserted into the electronic money terminal 15 and the amount is input, the electronic money terminal 15 transmits, for example, transaction information and the like to the IC unit 20 of the electronic money card 19 in order to perform a charging process (FIG. 7 P1, L1 in FIG. 9).

The IC unit 20 determines from the transaction information that the designated process is an online process, and determines whether the final transaction pointer of the IC unit 20 matches the transmitted pointer. If it is determined that they do not match,
The C unit 20 stores the transaction history, the card ID, and the personal public key Pk2 stored at each address from the position next to the pointer indicated by the transmitted pointer to the position indicated by the final transaction pointer, together with the interrupt signal, to the electronic money terminal. 15 (P31).

In response to the interrupt signal, the electronic money terminal 15 transmits the received card ID, personal public key Pk2, and transaction history to the electronic money server 13 (P32).

The electronic money server 13 sends the received card ID and the personal public key Pk2 together with a confirmation request for confirming that they have been registered in the certificate authority 11 together with the certificate authority 1.
1 (P33).

The certificate authority 11 determines whether or not the received card ID and personal public key Pk2 are registered in the card ID and personal public key list stored therein. When the registration is confirmed, a confirmation completion message indicating the completion of the confirmation is returned to the electronic money server 13 (P34). If the received card ID and the personal public key Pk2 are not registered, the certificate authority 11 detects the fraudulently by the electronic money server 13.
Notify.

Upon receiving the confirmation completion message from the certificate authority 11, the electronic money server 13 matches the transaction history received from the electronic money card 19 with the transaction history stored therein. When all the received transaction histories and the transaction histories stored therein match and the matching is completed, the electronic money server 13 transmits a matching completion message to the electronic money terminal 15 (P35).

The electronic money terminal 15 transmits the received matching completion message to the electronic money card 19 (P3
6). When receiving the matching completion message, the electronic money card 19 updates the transmitted pointer stored in the IC unit 20 so as to match the last transaction pointer. Subsequently, a process originally required by the electronic money terminal 15 is executed.

When the electronic money server 13 determines that the received transaction history and the transaction history stored therein do not match, the electronic money server 13 notifies the electronic money terminal 15 of the mismatch, and also detects the fraud by displaying a message or the like. Notify the administrator, etc.

When the last transaction pointer and the transmitted pointer match, the electronic money card 19 continues the processing according to the request signal because there is no unsent history.

This matching process may be executed only after the electronic money payment process has been performed. In this case, for example, when the electronic money terminal 15 executes the electronic money payment processing, the IC section 20 of the electronic money card 19
To set the unsent history flag. When the electronic money card 19 is inserted and the online processing is instructed, the electronic money transaction terminal 15 determines whether or not the unsent history flag is on, and if it is on, executes the above matching processing.

The matching process will be specifically described with reference to FIGS. Here, user A has previously
It is assumed that the electronic money is paid by the electronic money card 19A of the card ID “C99”, and the unsent transaction history is stored in the optical storage unit 21 of the electronic money card 19A.

The user A, for example, instructs charging of electronic money, and inserts the electronic money card 19A into the electronic money terminal 15B. The electronic money terminal 15B stores the transaction information including the transaction category (charge), the use date and the transaction amount, and the terminal ID into the card ID and the personal public key Pk2.
Of the electronic money card 19A together with the request signal for requesting
It transmits to C section 20.

The IC section 20 determines from the transaction information that online processing has been selected, and determines whether or not the final transaction pointer stored therein matches the transmitted pointer. As shown in FIG. 16, the transmitted pointer points to the address “2”, and the last transaction pointer is the address “2”.
5 ”, the IC unit 20 sets the address“ 2 ”next to the address“ 2 ”indicated by the transmitted pointer.
Address "5" to which the last transaction pointer points from "3"
Signal of transaction history R3 to R5 up to interrupt signal and card I
D "C99" and the personal public key Pk2A are transmitted to the electronic money terminal 15B (L31). Electronic money terminal 15B
Transmits the received transaction histories R3 to R5, the card ID and the personal public key Pk2A to the electronic money server 13 (L3
2).

The electronic money server 13 transmits the received card ID “C99” and the personal public key Pk2A to the certificate authority 11 together with a confirmation request (L33). The certificate authority 11 confirms that the received card ID and personal public key Pk2A are registered in the card ID and personal public key list stored therein, and transmits a confirmation completion message to the electronic money server 13 ( L34).

When the electronic money server 13 receives the confirmation completed message, the electronic money server 13 compares the transaction histories R3 to R5 with the transaction history stored therein. That is, addresses “3” to “”
The transaction history R3 to R5 of 5 ″ are all stored in the electronic money server 13.
Check that it matches the transaction history stored in. As a result of the check, if the transaction histories R3 to R5 match the transaction histories stored in the electronic money server 13, the electronic money server 13 checks the balance of the card ID “C99” in the balance table shown in FIG. Is updated, and the matching completion message is transmitted to the electronic money terminal 15B (L3
5). The electronic money terminal 15B transmits the received matching completion message to the electronic money card 19A (L3
6). When receiving the matching completion message, the electronic money card 19A updates the transmitted pointer stored in the IC unit 20 from “2” to “5” as shown in FIG.

Thereafter, the electronic money terminal 15 and the electronic money card 19A execute the designated electronic money charging process.

In the matching process described above, the transaction history from the electronic money card 19 and the transaction history from the electronic money terminal 15 stored in the electronic money server 13 are compared. This makes it possible to easily detect a transaction history that has been fraudulently generated (for example, the transaction amount has been falsified). Further, when fraud is detected, by referring to the transaction history stored in the optical storage unit 21 of the fraudulent electronic money card 19, when, where and how much is used
Etc. can be known.

(5) Electronic Money Transfer Processing Next, an outline of electronic money transfer processing will be described with reference to FIG. The side that transfers (transfers) the electronic money is referred to as the electronic money card 19A, and the side that receives the transfer is the electronic money card 19B.

According to the screen display shown in FIG. 8A, “3) Transfer of electronic money” is selected from the processing menu displayed on the display section 32, and the electronic money card 19A is inserted into the card insertion slot 35A. Are respectively inserted into the card insertion slots 35B, and the transfer amount from the electronic money card 19A to the electronic money card 19B is input.
In response to this input, the electronic money terminal 15 provides the electronic money card 19A and the electronic money card 19B with transaction information including a transaction category (transfer from 19A to 19B), a use date and a transaction amount. A request signal indicating a request for a terminal ID, a card ID, and a personal public key is transmitted (P41).

When receiving the terminal ID, the transaction information, and the request signal, the electronic money card 19A uses the personal secret key Pk1A, and uses the terminal ID, the transaction information, and the transaction authenticator @ Pk1A (terminal ID + transaction information) for the card ID of its own. + 19A card ID) @ is created. Electronic money card 19A
Is the created transaction authenticator, card ID and personal public key Pk2
A is transmitted to the electronic money terminal 15 (P42).

The electronic money card 19B has a terminal ID
Upon receiving the transaction information and the request signal, the personal secret key Pk1
B, the customer ID {Pk1B (terminal ID + transaction information + 1) for the terminal ID, transaction information, and own card ID
9B card ID) @. Electronic money card 1
9B transmits the created supplier authenticator, card ID and personal public key Pk2B to the electronic money terminal 15 (P4
2).

The electronic money terminal 15 receives the transaction authenticator {Pk1A (terminal ID + transaction information + card ID of 19A)} received from the electronic money card 19A, the card ID, the personal public key Pk2A, and the transaction received from the electronic money card 19B. The pre-authenticator {Pk1B (terminal ID + transaction information + card ID of 19B)}, the card ID, the personal public key Pk2B, and an instruction to move the amount (transfer amount) input from the electronic money card 19A to the electronic money card 19B. A transfer request message is transmitted to the electronic money server 13 (P4
3). The transfer request message includes the terminal ID.

The electronic money server 13 stores the card I of the received electronic money card 19A and electronic money card 19B.
D and terminal ID are accident card ID list and accident terminal I
It is determined whether or not it is registered in the D list.

If the received card ID and terminal ID are not registered in the accident card ID list and the accident terminal ID list, the electronic money server 13 checks the balance of the electronic money card 19A in the balance table shown in FIG. Check. If the balance is insufficient, a message indicating that the balance is insufficient is transmitted to the electronic money terminal 15. The electronic money terminal 15 displays a message indicating that the designated amount cannot be transferred due to insufficient balance.

If the balance is equal to or greater than the designated transfer amount, the electronic money server 13 uses the personal public key Pk2A of the electronic money card 19A to make the transaction authenticator {Pk1A (terminal ID +
Is converted into a terminal ID, transaction information, and a card ID of the electronic money card 19A. Further, using the personal public key Pk2B of the electronic money card 19B, the supplier authenticator @ Pk1B (terminal ID + transaction information + 1)
9B card ID) is converted into a terminal ID, transaction information, and a card ID of the electronic money card 19B. Next, it is determined whether or not the converted contents are correct. That is, the transaction information and the terminal ID decrypted from the transaction authenticator match with the terminal ID, the card ID converted from the transaction authenticator matches the card ID of the electronic money card 19A of the transfer source, and the transaction It is checked that the card ID converted from the former authenticator matches the card ID of the transfer destination electronic money card 19B. If it is determined that all match, the electronic money card 19A and the electronic money card 19 in the balance table are displayed.
The balance of B is updated.

Next, the electronic money server 13 stores the card IDs of the electronic money cards 19A and 19B.
And the personal public key is transmitted to the certificate authority 11 together with the authentication grant request (P44).

In response to the authentication grant request, the certificate authority 11 registers the card IDs and the personal public keys Pk2A and Pk2B of the received electronic money cards 19A and 19B in the card ID and personal public key list stored therein. Check if it is. If it is determined that these are registered, the authentication information {Ck1 (19A card ID + Pk2A)} and {Ck1 (1) are used for them using the center secret key Ck1.
9B card ID + Pk2B)}, and transmits it to the electronic money server 13 together with the authentication completion message (P4).
5).

In response to the authentication completion message, the electronic money server 13 generates and stores a transaction history of the transfer source electronic money card 19A and a transaction history of the transfer destination electronic money card 19B. Further, the authentication information from the certificate authority 11 is added to the transaction history and transmitted to the electronic money terminal 15 together with the transfer completion message (P46).

When receiving the transaction history and the authentication information, the electronic money terminal 15 converts the authentication information into a card ID and a personal public key Pk2 using the center public key Ck2 and checks it. When it is confirmed that the authentication information is correct, the received transaction history is transmitted to the electronic money card 19A and the electronic money card 19B in response to the transfer completion message (P47). IC of electronic money cards 19A and 19B
The unit 20 updates the balances stored therein based on the received transaction history. That is, the electronic money card 1
The IC unit 20 of the 9A reduces the stored balance by a predetermined amount based on the received transaction history.
The 9B IC unit 20 increases the stored balance by a predetermined amount based on the received transaction history.

Furthermore, the electronic money cards 19A and 19B
Respectively transmit the value of the final transaction pointer to the electronic money terminal 15. The electronic money terminal 15
The received transaction history is added to the address next to the address indicated by the value of the last transaction pointer in the optical storage unit 21 of the electronic money cards 19A and 19B. Further, the final transaction pointer and the transmitted pointer are updated to indicate the added transaction history. Thereafter, the electronic money terminal 15 displays on the display unit 32 that the transfer of the electronic money has been completed, and discharges the electronic money cards 19A and 19B.

The user A transfers the electronic money transfer process from the electronic money card 19A (card ID “C99”) to the electronic money card 19B (card ID “C05”) by using the electronic money terminal 15C (terminal ID “T150”). An example in which 30,000 yen of electronic money is transferred via the Internet will be described with reference to FIG.

First, the user A selects “3) transfer of electronic money” from the processing menu according to the screen display shown in FIG. 8A, and inserts the electronic money card 19A into the transfer source card insertion slot 35A. Then, the user inserts the electronic money card 19B into the transfer destination card insertion slot 35B and inputs the transfer amount.

In response to this input, the electronic money terminal 15
C is the electronic money card 19A and the electronic money card 19
B, a transaction ID including a transaction category, a use date and a transaction amount, a terminal ID “T150”, and a card ID
And a request signal indicating a request for a personal public key, respectively (L41).

The electronic money card 19A responds to the request signal by adding its own card ID “C99” to the terminal ID “T150” and the transaction information, and using the personal secret key Pk1A to make the transaction authenticator {Pk1A (T150 + transaction information). + C99)}, and sends the transaction authenticator to the electronic money terminal 15C together with the card ID “C99” and the personal public key Pk2A (L
42).

In response to the request signal, the electronic money card 19B adds its own card ID “C05” to the terminal ID “T150” and the transaction information, and uses the personal secret key Pk1B to authenticate the supplier authenticator {Pk1B ( T150 + Transaction information + C0
5) Create｝ and set the supplier authenticator to card ID “0”.
5 "and the personal public key Pk2B are transmitted to the electronic money terminal 15C (L42).

The electronic money terminal 15C receives the card ID “C99” received from the electronic money card 19A, the personal public key Pk2A, and the transaction authenticator @ Pk1A (T150 + transaction information +
C99), the card ID “C05” received from the electronic money card 19B, the personal public key Pk2B, and the business partner authenticator {Pk1B (T150 + transaction information + C05)}, and 30,000 from the electronic money card 19A to the electronic money card 19B. A transfer request message instructing to move the electronic money in yen is transmitted to the electronic money server 13 (L43). The transfer request message includes the terminal ID “T150”.

The electronic money server 13 stores the received card I of the electronic money card 19A and the received electronic money card 19B.
It is checked whether D "C99", "C05" and terminal ID "T150" are registered in the list of accident card ID and accident terminal ID. Card ID "C99", "
If it is determined that C05 ”and the terminal ID“ T150 ”are not registered as an accident card or an accident terminal, the electronic money server 13 transmits the electronic money card 19 of the transfer source.
The balance of A is checked with reference to the balance table.

If the balance is less than 30,000 yen, the electronic money server 13 transmits a message to the effect that the balance is insufficient to the electronic money terminal 15. If the balance is 30,000 yen or more, the electronic money server 13 uses the personal public key Pk2A to send the transaction authenticator {Pk1A (T150 + transaction information + C99)} to the terminal ID.
And the transaction information and the card ID of the electronic money card 19A. In addition, the customer ID {Pk1B (T150 + transaction information + C05)} is transmitted to the terminal ID using the personal public key Pk2B.
And transaction information and a card ID.

Subsequently, it is determined whether or not these contents are correct. That is, the terminal ID converted from the transaction authenticator and the transaction authenticator match the transaction information, and the card ID converted from the transaction authenticator is used as the card ID “C99” of the transfer source electronic money card 19A. A check is made to see if the card ID converted from the supplier authenticator matches the card ID “C05” of the transfer destination electronic money card 19B. As a result of the check, if it is determined that the transaction authenticator and the supplier authenticator are correct, the electronic money server 13
Subtracts 30,000 yen from the balance of the card ID “C99” in the balance table and adds 3 to the balance of the card ID “C05”.
Add 10,000 yen. Next, the electronic money server 13 transmits the card I of the electronic money card 19A and the electronic money card 19B.
D “C99”, “C05” and personal public keys Pk2A, Pk2
B together with the authentication grant request to the certificate authority 11 (L4
4).

The certificate authority 11 responds to the authentication grant request and refers to the card ID and the public key stored therein to thereby obtain the card IDs “C99” and “C05” of the received electronic money cards 19A and 19B. And whether the personal public keys Pk2A and Pk2B are registered in this system. When the certificate authority 11 confirms that they have been registered, the card ID “C99”, “
The authentication information {Ck1 (C99 + Pk2A)} of the electronic money card 19A and the electronic money card 19B using the center secret key Ck1 for C05 ″ and the personal public keys Pk2A and Pk2B.
The authentication information {Ck1 (C05 + Pk2B)} is generated and transmitted to the electronic money server 13 together with the authentication completion message (L45).

The electronic money server 13 stores the authentication information {Ck1} of the electronic money card 19A and the electronic money card 19B.
When (C99 + Pk2A)} and {Ck1 (C05 + Pk2B)} are received, the transaction history of the transfer source electronic money card 19A and the transaction history of the transfer destination electronic money card 19B are generated and stored in the transaction history table. Further, the authentication information from the certificate authority 11 is added to the transaction history and transmitted to the electronic money terminal 15C together with the transfer completion message (L4).
6).

When receiving the transaction history and the authentication information, the electronic money terminal 15 converts the authentication information into a card ID and a personal public key Pk2 using the center public key Ck2 and checks it. When the authentication information is confirmed to be correct, the received transaction history is stored in the electronic money cards 19A and 19B.
Each is transmitted to the C section 20 (L47). The IC units 20 of the electronic money cards 19A and 19B update the balance stored in the storage circuit based on the received transaction history. That is, the electronic money card 19A reduces the balance by 30,000 yen, and the electronic money card 19B increases the balance by 30,000 yen. Further, the electronic money terminal 15C has an electronic money card 19A.
The value of the last transaction pointer is read from the IC unit 20 of the electronic money card 19A and the optical storage unit 21 of the electronic money card 19B.
The transaction history is added to the address next to the address indicated by the value of the last transaction pointer.

Further, the electronic money terminal 15C updates the last transaction pointer and the transmitted pointer stored in the IC unit 20 of the electronic money cards 19A and 19B so as to indicate the added transaction history. Thereafter, the electronic money terminal 15C displays on the display unit 3 that the transfer of the electronic money has been completed.
2 and the electronic money cards 19A and 19B are ejected.

The balance of the electronic money card 19A of the transfer source may be checked by the electronic money terminal 15 when "3) Transfer of electronic money" is selected from the menu and the transfer amount is input. Good. In this case, the electronic money terminal 15 makes a balance request to the electronic money card 19A.

Further, the electronic money terminal 15C in which the electronic money card 19A is inserted and the electronic money terminal 15D in which the electronic money card 19B is inserted may be configured to transfer electronic money. The transfer process between the two electronic money terminals 15C and 15D will be described below with reference to FIG. In this description, the side that transfers (transfers) the electronic money is referred to as the electronic money terminal 15C, and the side that receives the transfer is the electronic money terminal 15D.

First, the electronic money card 19A is inserted into the electronic money terminal 15C, and the electronic money card 19B is inserted into the electronic money terminal 15D. The transfer instruction of the electronic money and the transfer destination electronic money are sent to the transfer source electronic money terminal 15C. Information (for example, terminal ID) for specifying the money terminal 15D is input. In response to the input, the electronic money terminal 15C transmits the card ID, the request signal indicating the request for the personal public key, the transaction information, and the terminal ID to the electronic money card 19A (L61). To the electronic money terminal 15D as the transfer destination (S62).

When receiving the specific information from the electronic money terminal 15C, the electronic money server 13 transmits a notification signal notifying that the terminal has been designated as the transfer destination to the electronic money terminal 15D indicated by the specific information (L63). ). In response to the notification signal from the electronic money server 13, the electronic money terminal 15D transmits a card ID, a request signal indicating a request for a personal public key, transaction information, and a terminal ID to the electronic money card 19B. (L64)

When the electronic money card 19A inserted into the electronic money terminal 15C receives the terminal ID, the transaction information, and the request signal, it uses the personal secret key Pk1A to authenticate the transaction with respect to the terminal ID, the transaction information, and its own card ID. Child @ Pk1
A (terminal ID + transaction information + card ID of 19A)} is created. The electronic money card 19A transmits the created transaction authenticator, card ID, and personal public key Pk2A to the electronic money terminal 15C (L65).

When the electronic money card 19B inserted into the electronic money terminal 15D receives the terminal ID, the transaction information, and the request signal, the electronic money card 19B uses the personal secret key Pk1B to execute the terminal I / O.
D, transaction information, and supplier authenticator @ Pk1B (terminal ID + transaction information + card I of 19B) for own card ID
D) Create｝. The electronic money card 19B transmits the created supplier authenticator, card ID, and personal public key Pk2B to the electronic money terminal 15D (L66).

The electronic money terminal 15C receives the transaction authenticator $ Pk1A (terminal ID +
The transaction information + 19A card ID), the card ID, the personal public key Pk2A, and the transfer request message are transmitted to the electronic money server 1.
Send to 3. (L67) Also, the electronic money terminal 15D
Is the customer authenticator @ Pk1B (terminal ID + transaction information + card I of the 19B received from the electronic money card 19B).
D) The electronic money server 1 transmits the $, the card ID, the personal public key Pk2B, and the transfer source message indicating that it is the transfer source.
3 (L68). The transfer request message and the transfer source message include the terminal ID.

The electronic money server 13 determines whether or not the received card IDs of the electronic money cards 19A and 19B and the terminal IDs of the electronic money terminals 15C and 15D are registered in the accident card ID list and the accident terminal ID list. .

If the received card ID and terminal ID are not registered in the accident card ID list and the accident terminal ID list, the electronic money server 13 checks the balance of the electronic money card 19A in the balance table shown in FIG. Check. If the balance is insufficient, a message to the effect that the balance is insufficient is transmitted to the electronic money terminal 15C. The electronic money terminal 15C displays a message indicating that the designated amount cannot be transferred due to insufficient balance.

If the balance is equal to or greater than the designated transfer amount, the electronic money server 13 uses the personal public key Pk2A of the electronic money card 19A to make the transaction authenticator {Pk1A (terminal ID +
Is converted into a terminal ID, transaction information, and a card ID of the electronic money card 19A. Further, using the personal public key Pk2B of the electronic money card 19B, the supplier authenticator @ Pk1B (terminal ID + transaction information + 1)
9B card ID) is converted into a terminal ID, transaction information, and a card ID of the electronic money card 19B. Next, the converted contents are collated to determine whether they are correct.
When it is determined that the contents are correct, the balances of the electronic money cards 19A and 19B in the balance table are updated.

Next, the electronic money server 13 checks the card IDs of the electronic money cards 19A and 19B.
And the personal public key is transmitted to the certificate authority 11 together with the authentication grant request (L69).

In response to the authentication grant request, the certificate authority 11 registers the received card IDs of the electronic money cards 19A and 19B and the personal public keys Pk2A and Pk2B in the card ID and personal public key list stored therein. Check if it is. If it is determined that these are registered, the authentication information {Ck1 (19A card ID + Pk2A)} and {Ck1 (1) are used for them using the center secret key Ck1.
9B card ID + Pk2B)}, and transmits it to the electronic money server 13 together with the authentication completion message (L7).
0).

In response to the authentication completion message, the electronic money server 13 generates and stores a transaction history of the transfer source electronic money card 19A and a transaction history of the transfer destination electronic money card 19B. Further, the authentication information from the certificate authority 11 is added to the transaction history, and the transaction history is transmitted to the electronic money terminal 15C and the electronic money terminal 15D together with the transfer completion message (L
71).

Electronic money terminal 15C and electronic money terminal 1
Upon receiving the transaction history and the authentication information, the 5D converts the authentication information into a card ID and a personal public key Pk2 using the center public key Ck2 and checks. When the authentication information is confirmed to be correct, the received transaction history is transmitted to the respective electronic money cards 19A and 19B (L
72). IC section 20 of electronic money cards 19A and 19B
Updates the balance stored in each of them based on the received transaction history. That is, the IC unit 20 of the electronic money card 19A reduces the stored balance by a predetermined amount based on the received transaction history, and the IC unit 20 of the electronic money card 19B reduces the stored balance based on the received transaction history. Increases the balance being paid by a predetermined amount.

Further, the electronic money cards 19A, 19B
Transmits the value of the final transaction pointer to the electronic money terminals 15C and 15D, respectively. The electronic money terminals 15C and 15D are provided with respective electronic money cards 19
The received transaction history is added to the next address of the address indicated by the value of the last transaction pointer in the optical storage unit 21 of A, 19B. Further, the final transaction pointer and the transmitted pointer are updated to indicate the added transaction history. Thereafter, the electronic money terminals 15C and 15D display that the transfer of the electronic money has been completed, and eject the respective electronic money cards 19A and 19B.

In the above description, the electronic money transfer processing is executed by the online processing. However, when the transfer amount is equal to or less than a fixed amount, the electronic money transfer processing is performed in the electronic money terminal 15 similarly to the electronic money payment processing. Is also good. Thereby, the response speed can be improved. In the case of off-line processing, a limit on the amount of one transfer may be set in order to enhance security.

(6) Electronic Money Conversion Processing Next, an outline of the electronic money conversion processing for converting the electronic money stored in the electronic money card 19 and transferring the electronic money to the user's settlement account will be described with reference to FIG. . First, as shown in FIG. 8, the user selects “2) redeeming electronic money” from the processing menu displayed on the display unit 32, inserts the electronic money card 19 into the electronic money terminal 15, and sets the cash amount. Enter

In response to the selection, the electronic money terminal 15 responds to the selection by selecting transaction information including the transaction category, date of use, and transaction amount, a terminal ID, a card ID and a request signal indicating a request for a personal public key. Is transmitted to the electronic money card 19 (P51).

In response to the request signal, the electronic money card 19 adds its own card ID to the terminal ID and the transaction information, and uses the personal secret key Pk1 to make a transaction authenticator {Pk1 (terminal ID + transaction information + card ID)}. Is created, and the created transaction authenticator is transmitted to the electronic money terminal 15 together with the card ID and the personal public key (P52).

The electronic money terminal 15 receives the card I
D, the transaction information and the terminal ID are added, and the customer authenticator @ Tk1 (terminal ID + transaction information + card I) using the terminal secret key Tk1.
D) Create｝. The electronic money terminal 15 uses the created supplier authenticator @ Tk1 (terminal ID + transaction information + card I
D) $, the entered cash amount and the electronic money card 1
9 instructs transfer to the corresponding settlement account, a cashing request including the terminal public key Tk2, and the electronic money card 19
And the personal public key Pk2 to the electronic money server 13 (P53). The cashing request includes the terminal ID of the electronic money terminal 15 of the transmission source.

The electronic money server 13 checks whether or not the card ID and the terminal ID of the received electronic money card 19 are registered in the accident card ID list and the accident terminal ID list stored therein. When it is determined that the received card ID and terminal ID are not registered in the accident card ID list and the accident terminal ID list, the electronic money server 13 uses the received personal public key Pk2 to make the transaction authenticator {Pk1 ( Terminal ID + transaction information + card I
D)｝ is converted into a terminal ID, transaction information, and a card ID. Further, using the received terminal public key Tk2, the business partner authenticator {Tk1 (terminal ID + transaction information + card ID)} is transmitted to the terminal I.
D, the transaction information, and the card ID are converted, and it is determined whether or not they match. If these match, the electronic money server 13 determines that the transaction authenticator {Pk1 (terminal ID + transaction information + card ID)} and the supplier authenticator {Tk1 (terminal ID +
Transaction information + card ID)｝ is determined to be correct, and card I
D and the personal public key Pk2 together with the certificate grant request
(P54).

The certificate authority 11 responds to the authentication grant request and refers to the list of the card ID and the personal public key stored therein, so that the received card ID and the personal public key Pk2 are registered in the system. Check if it is. If they are registered, the certificate authority 11 generates the authentication information {Ck1 (card ID + Pk2)} for the received card ID and personal public key Pk2 using the center secret key Ck1, and sends it to the electronic money server 13. It is transmitted (P55).
If the received card ID and personal public key Pk2 are not registered in the system, the certificate authority 11 notifies the electronic money server 13 of fraud detection.

When the electronic money server 13 receives the authentication information {Ck1 (card ID + Pk2)} from the certificate authority 11,
The balance of the electronic money card 19A is checked with reference to the balance table, and if transfer is possible, a transfer request message including the card ID and the transfer amount is created and transmitted to the bank center 17 (P56).

If at least one of the received card ID and terminal ID matches one of the list of unusable card IDs and terminal IDs, or if the transaction ID and the terminal ID converted from the supplier Information and Card I
D does not match each other, the electronic money server 13
Transmits a message to the effect that charging is not possible to the electronic money terminal 15 and notifies the administrator of the fraud detection by displaying a message or the like. When the balance of the electronic money card 19 is insufficient, the electronic money server 13
A message indicating that the balance is insufficient is transmitted to the electronic money terminal 15.

Upon receiving the transfer request message, the bank center 17 refers to the account table shown in FIG. 5 and transfers the designated amount from another account to the settlement account corresponding to the card ID (P57). After the transfer is completed, Bank Center 17
Transmits the transfer completion message to the electronic money server 13 (P58).

Upon receiving the transfer completion message, the electronic money server 13 updates the balance in the balance table of the electronic money card 19, generates a transaction history, and stores the transaction history in the transaction history table. Next, the electronic money server 13 adds the authentication information {Ck1 (card ID + Pk2)} from the certificate authority 11 to the transaction history, and transmits it to the electronic money terminal 15 together with a redemption completion message indicating that the redemption has been completed (P59). .

When electronic money terminal 15 receives the transaction history, the authentication information {Ck1 (card ID + Pk2)}, and the transfer completion message, authentication information {Ck1 using center public key Ck2.
(Card ID + Pk2)｝ is replaced with the card ID and personal public key Pk2
Convert to and check. When the authentication information is confirmed to be correct, the transaction history is transmitted to the electronic money card 19 (P60).

The IC section 20 of the electronic money card 19 updates the balance and transmits the value of the final transaction pointer to the electronic money terminal 15 based on the received transaction history. The electronic money terminal 15 stores the received transaction history in the optical storage unit 21.
Is added to the address next to the address indicated by the last transaction pointer. Subsequently, the last transaction pointer and the transmitted pointer stored in the IC unit 20 are updated. afterwards,
The electronic money terminal 15 displays that the electronic money has been redeemed on the display unit 32 and ejects the electronic money card 19.

The electronic money redemption process is executed by the user A by transferring 50,000 yen of the electronic money stored in the electronic money card 19A (card ID “C99”) to the electronic money terminal 1.
5B (terminal ID “T150”) and the bank center 1
The case of transferring to the own settlement account of No. 7 will be described with reference to FIG. 21 as an example. The user A selects “2) redeem electronic money” from the processing menu displayed on the display unit 32,
The electronic money card 19A is attached to the electronic money terminal 15B, and the cash amount “50,000 yen” is input to the input unit 31.

In response to this operation, the electronic money terminal 15
B indicates, on the electronic money card 19A, the transaction information including the transaction category, the date of use, and the transaction amount, and the terminal ID ".
T150 "and a request signal for requesting transmission of the card ID and the personal public key (L51). The electronic money card 19A responds to the request signal and receives the received terminal ID" T.
150 ”and its own card ID“ C99 ”to the transaction information, and the transaction authenticator {Pk1A” using the personal secret key Pk1A.
(T150 + transaction information + C99) is created. The electronic money card 19A generates the transaction authenticator $ Pk1A (T
150 + transaction information + C99) and card ID “C99”
And the personal public key Pk2A to the electronic money terminal 15B (L52).

The electronic money terminal 15B adds the transaction information and the terminal ID “T150” to the received card ID “C99” and uses the terminal secret key Tk1 to authenticate the supplier authenticator {Tk1B (T
150 "+ transaction information + C99)}. The electronic money terminal 15B creates the supplier authenticator {Tk1B (T1
50 ”+ transaction information + C99)} and the entered cash amount from the electronic money card 19A to the electronic money card 1
9A, instructing the transfer to the settlement account corresponding to 9A, a cashing request including the terminal public key Tk2B, and the electronic money card 1
9A card ID "C99", personal public key Pk2A,
Transaction authenticator @ Pk1A (T150) + transaction information + C9
9) is transmitted to the electronic money server 13 (L5)
3).

The electronic money server 13 stores the card ID “C99” of the electronic money card 19A and the terminal ID “T15”.
Check whether "0" is registered in the accident card ID list and the accident terminal ID list. The received card ID "C99" and terminal ID "T150" are registered in the accident card ID list and the accident terminal ID list. If the electronic money server 13 determines that the transaction authenticator {Pk1A (T1
50 "+ transaction information + C99)｝ is replaced with transaction information and card ID
To the terminal ID. Further, the received terminal public key T
The customer authenticator {Tk1B (T150) + transaction information + C99) is converted into transaction information, a card ID, and a terminal ID using k2B, and it is determined whether or not they match each other. , The electronic money server 13 uses the card I
D “C99” and the personal public key Pk2A are transmitted to the certificate authority 11 together with the authentication grant request (L54).

The certificate authority 11 refers to the card ID and the personal public key stored therein and receives the received card ID “C”.
99 "and the personal public key Pk2A are registered in the system, and if it is confirmed that the personal public key Pk2A has been registered, the authentication information {Ck1 (C99 + Pk2
A) A is generated and transmitted to the electronic money server 13 together with the authentication completion message (L55). The electronic money server 13
From the certificate authority 11, the authentication completion message and the authentication information @ Ck1 (C99
+ Pk2A)}, the balance table card I
It is determined whether or not the balance of D “C99” is equal to or more than the cash amount of 50,000 yen. If the balance is 50,000 yen or more, the electronic money server 1
3 transmits a transfer request message including the card ID “C99” and the transfer amount “50,000 yen” to the bank center 17 (L5
6).

The bank center 17 has the electronic money server 13
When the transfer request message is received from, the account table is referred to, and 50,000 yen is transferred from another account to the settlement account of user A corresponding to card ID “C99”. When the transfer process is completed, the bank center 17 transmits a transfer completion message to the electronic money server 13 (L57). Electronic money server 13
Receives the transfer completion message, subtracts 50,000 yen from the balance of card ID “C99” in the balance table, generates a transaction history, and stores it in the transaction history table. Next, the electronic money server 13 sends the authentication information {Ck1 (C
99 + Pk2A) @ is added to the transaction history, and transmitted to the electronic money terminal 15B together with the cashing completion message (L58).

[0179] The electronic money terminal 15B responds to the cashing completion message and uses the center public key Ck2 to authenticate the authentication information $ Ck1.
(C99 + Pk2A) @ is replaced with the card C99 and the personal public key Pk2
Convert to and check. If the authentication information is confirmed to be correct, the transaction history is stored in the electronic money card 19A.
(L59). Electronic money card 19A IC
The unit 20 subtracts 50,000 yen from the balance stored by itself based on the received transaction history. Further, the electronic money terminal 15B adds the received transaction history to the position indicated by the final transaction pointer in the optical storage unit 21, and updates the values of the final transaction pointer and the transmitted pointer. Thereafter, the electronic money terminal 15B displays on the display unit 32 that the electronic money has been redeemed, and discharges the electronic money card 19A.

In this way, the user can convert the electronic money stored in his / her own electronic money card 19 and transfer it to his / her settlement account.

[0181] The electronic money terminal 15 may check the balance of the electronic money card 19. In this case, the electronic money terminal 15 is
To request a balance.

As described above, with this electronic money system, electronic money can be charged to an electronic money card, redeemed, transferred, and used for payment.
In addition, since the transaction history is recorded in the optical storage unit 21, by verifying (tracking) the recorded contents of the write-once type storage unit, it is possible to easily detect an improper act or the like. Furthermore, by recording the transaction history at the center,
Fraud can be more reliably detected.

Note that the present invention is not limited to the above embodiment, and various modifications and applications are possible. For example, the components of the transaction history are arbitrary, and each transaction has a unique transaction I
D, the balance of the electronic money at that time, the transaction time, minute, second, etc. may be included in the transaction history. Further, authentication information and the like may be deleted from the transaction history.

Information for specifying the card may be omitted from the transaction history recorded in the optical storage unit 21. For example, when an electronic money card 19 is charged with electronic money, the optical storage unit 21 of the electronic money card 19 records, for example, that the transaction is charge, transaction date and time, transaction amount, terminal ID, and the like, There is no need to record information identifying yourself.

Similarly, for example, the electronic money card 19A
When the electronic money is transferred from the electronic money card 19B to the electronic money card 19B, the optical storage unit 21 of the electronic money card 19A indicates that the transaction category is the transfer of the electronic money, the card ID of the transfer destination electronic money card 19B, and the transfer amount. And so on,
The information for specifying the transfer source (electronic money card 19A) is not recorded, and the optical storage unit 21 of the electronic money card 19B stores
The transfer of the electronic money, the card ID of the transfer source electronic money card 19A, the transfer amount, and the like may be recorded, and the information for specifying the transfer destination (the electronic money card 19B) may not be recorded. Thus, the amount of data recorded in the optical storage unit 21 can be reduced.

In the above embodiment, a list of settlement accounts of the user of the electronic money card is registered in the bank center 17,
Although the card ID is converted to the account number of the settlement account, the account number of the settlement account is registered in the IC unit 20 or the optical storage unit 21 of the electronic money card 19, and the charge of the electronic money,
When performing processing such as cash conversion, the account number may be notified to the bank center 17 from the electronic money card 19.

In the above embodiment, the signature key Sk and the inspection key Ek are used to generate and confirm the signature included in the personal authentication information.
Although the center secret key Ck1 and the center public key Ck2 may be used.

It is also possible to process payment at a store as a transfer of electronic money. In this case, a form of processing in which electronic money corresponding to the sales amount is transferred from the electronic money card 19 of the customer to the electronic money card 19 of the store is adopted. For example, the electronic money terminal 15 shown in FIG. 4B has a card insertion slot 35 for inserting the customer's electronic money card 19A and a terminal owner side (store,
Electronic money card 19 (including sales staff, sales manager, etc.)
A card insertion slot for inserting B is provided.
The terminal owner's electronic money card 19B is inserted into the store card insertion slot at the time of opening a store or the like.

When the sales calculation is completed, the electronic money terminal 1
5 (for example, a POS terminal) displays a message inquiring on the display unit 32 about the sales amount and the payment method. In response to this message, payment by electronic money is selected, and the customer's electronic money card 19A is inserted into the insertion slot. Subsequent processing is the same as the above-described transfer processing.

Note that the above-described offline transfer processing may be employed.

In the above description, the IC section 20 stores the last transaction history position among the transaction histories stored in the optical storage section 21, but the IC section 20 stores the last transaction history position. Any position information that is useful when newly writing a transaction history may be used. For example, the IC unit 20
May store the position next to the last transaction history.

In each transaction, if the balance is insufficient, the transaction is not allowed. However, a message indicating the balance is insufficient may be displayed on the electronic money terminal 15 so that the user can re-enter the transaction amount.

When this electronic money system is constructed on a network of a wide area network (for example, the Internet), it is desirable to provide the certificate authority 11 and the electronic money server 13 respectively. However, in a closed loop type local network, , The certificate authority 11 and the electronic money server 13 may be realized as one server.

Further, this electronic money system is shown in FIG.
As shown in (1), the configuration may be such that the certificate authority 11 is omitted.
The outline of each process in this case is shown in FIGS. The processing in this case is, as apparent from FIGS. 23 to 27 and the previous drawings, the center secret key and the center public key,
The operation is the same as that of the embodiment except that the processes related to the personal secret key, the personal public key, and the authentication are eliminated. According to this configuration, the processing speed is improved in the entire system. When the certificate authority 11 is omitted, the electronic money terminal 1
5 generates a transaction history based on the input transaction instruction,
Write to electronic money card and electronic money server 1
3 may be transmitted with information on the transaction. The electronic money server 13 stores the transaction history of the transaction in the transaction history table based on the received information.

Since the personal public key of the electronic money card 19 has already been registered in the personal authentication information issuance processing, the personal public key is not transmitted when transmitting the transaction authenticator of the electronic money card 19. Is also good. Similarly, if the terminal public key of the electronic money terminal 15 is registered in the center 10, it is not necessary to transmit the terminal public key when transmitting the supplier authenticator of the electronic money terminal 15.

The card ID of the electronic money card 19 and the personal public key Pk2 are transmitted to the certificate authority 11, and the certificate authority 11 issues the electronic money card 19 instead of the authentication information generated by signing them. For example, a personal authenticator stored in a card in advance may be used. Further, as the target of the generation of the authentication information by the certificate authority 11, for example, transaction information such as a cash amount and a date may be used. in this case,
The electronic money server 13 transmits the transaction history and the authentication information Ck1 (transaction information) to the electronic money terminal 15, and the electronic money terminal 15 confirms the received authentication information using the center public key Ck2. This makes it possible to more reliably confirm that the transaction has been made.

The certificate authority 11 responds to the authentication grant request by
k1 (card ID + personal public key Pk2 + “transaction permission message”) may be generated as authentication information. The "transaction permission message" may be a permission message according to the type of transaction, such as "charge permission message" in the case of charge processing. In addition, Ck1 (“transaction permission message”) as authentication information
May be used. Also, in this "transaction permission message",
The random number generated by the electronic money server 13 may be included. This makes forgery extremely difficult.

In order to enhance the security of the system, for example, the legitimacy of the operator of the electronic money terminal 15 may be determined based on the physical characteristics of the operator. For example,
The fingerprint data of the holder is stored in the storage circuit of the IC unit 20 of the electronic money card 19, the fingerprint of the operator of the electronic money terminal 15 is scanned, and the electronic money transaction processing is performed only when the fingerprints match. May be executed.

In this case, the electronic money terminal 15
The fingerprint reading device 41 as shown in FIG. The fingerprint reading device 41 has a reading window 41A for scanning a fingerprint.
And a guide 41B for guiding the finger. Also, I
The phase information extracted after Fourier transforming the fingerprint image of the holder is registered in the storage circuit of the C unit 20 in advance.

As shown in FIG. 29, the fingerprint reader 41 scans an image (fingerprint image) in the reading window 41A and acquires image data, and an image acquired by the image acquiring unit 51. Fourier transform unit 52 for performing a Fourier transform on the data (a waveform thereof), a phase information extracting unit 53 for extracting only the phase information of the Fourier series acquired by the Fourier transform unit 52, and phase information and phase information read from the IC unit 20 A phase synthesizing unit 54 for synthesizing the phase information generated by the extracting unit 53, a Fourier transform unit 55 for performing a Fourier transform on the phase information synthesized by the synthesizing unit 54 to obtain a correlation strength, and a Fourier transform unit 55 Compare the correlation strength with the threshold,
The determination unit 56 determines whether the operator is a valid person.

In such a configuration, for example, when a process is selected from the process menu and the electronic money card 19 is inserted, the electronic money terminal 15 puts a finger on the fingerprint reading device 41 as shown in FIG. A message to the effect that it should be placed is displayed on the display unit 32. When the operator places his finger on the fingerprint reader 41 according to the message, the image acquisition unit 51 of the fingerprint reader 41 scans the fingerprint in the reading window 41A and captures the image. The Fourier transform unit 52 performs a Fourier transform on the read image, and the phase information extracting unit 53 captures the phase information.

Subsequently, the phase synthesizing unit 54 reads out the phase information registered in the IC unit 20, and
3, and the Fourier transform unit 55 Fourier-transforms the combined data to obtain a correlation strength.

When the correlation strength is equal to or more than a predetermined value, the judgment unit 56 determines that the fingerprint registered in the IC unit 20 is similar to the read fingerprint, and the operator is a valid holder of the electronic money card 19. Is determined, and control is performed so as to enable subsequent processing corresponding to the selected processing. If the correlation strength is less than a certain value, it is determined that the fingerprint registered in advance in the IC unit 20 and the read fingerprint are not similar, and the display unit 32 displays that the fingerprint collation does not match, so that subsequent operations cannot be performed. Then, the electronic money card 19 is ejected.

According to such a configuration, it is possible to determine whether or not the operator is a legitimate person based on the physical characteristics of the operator and determine whether or not to permit electronic money transactions. . Therefore, unauthorized use of electronic money can be effectively prevented.

The method and circuit for determining the similarity between fingerprints are not limited to the circuit and method shown in FIG. 28, and other methods may be used. Further, the physical characteristics are not limited to fingerprints, and voice prints, facial patterns, retinal patterns, and the like may be used. When a voiceprint is used, the voiceprint feature data is stored in the IC unit 20, a microphone is arranged in the electronic money terminal 15, voice feature data obtained by the microphone is extracted, and stored in the IC unit 20. The correlation strength with the characteristic data is determined, and when the correlation strength is equal to or more than a certain value, the operator is determined to be a valid person.

When a face pattern, a retinal pattern, or the like is used, the face and retinal pattern feature data are
The electronic money terminal 15 stores a camera, extracts image feature data acquired by the camera,
The correlation strength with the feature data stored in the C unit 20 is determined, and when the correlation strength is equal to or more than a certain value, the operator is determined to be a valid person.

Note that the feature data extracted in advance is an IC
It may be stored in the unit 20 or may be stored in the optical storage unit 21. Further, feature data indicating a physical feature used at the time of the transaction may be recorded in the optical storage unit 21 as a part of the transaction history information.

In a system handling electronic money, for example,
Obtain information such as the card ID of the user, and
Fraudulent attempts to gain authentication by impersonating the owner of D can be considered. In order to prevent such misconduct, the security of the communication message or the like can be enhanced by encrypting it using an encryption method such as the RSA method.

[0209] In this case, for example, the certificate authority 11 generates and stores the center secret key Ck1 and the center public key Ck2. The certificate authority 11 stores the center secret key Ck1 in the electronic money server 13.
By copying the center secret key Ck1 to the center 1
Share within 0. Further, the certificate authority 11 transmits the center public key Ck2 to each electronic money terminal 15 and the electronic money card 19.
And the like via the electronic money server 13 in advance.

Each electronic money card 19 and the electronic money terminal 15 use the center public key Ck2 to send each information (card ID and personal public key for the electronic money card 19, charge request for the electronic money terminal 15, Telegram, etc.)
Is transmitted to the electronic money server 13. The electronic money server 13 decrypts and processes the information using the center secret key Ck1. The electronic money server 13 encrypts the transaction history using the personal public key sent from the electronic money card 19 and transmits the transaction history to the electronic money card 19 via the electronic money terminal 15.

By using such a method, the information from the electronic money card 19 and the electronic money terminal 15 is transmitted to the electronic money server 13 and the certificate authority 1 in the center 10.
1 can be decrypted, and the transaction history from the electronic money server 13 is transmitted to the electronic money card 19 without being referred to by the electronic money terminal 15 and decrypted. Further, security can be further improved by periodically changing the secret key and the public key.

The certificate authority 11 changes the center secret key Ck1 and the center public key Ck2 regularly or irregularly, and transfers the center public key Ck2 to the electronic money terminal 15 to the center secret key Ck2.
k1 is transmitted to the electronic money server 13, respectively. When the electronic money card 19 is inserted into the electronic money terminal 15 after changing the center secret key Ck1 and the center public key Ck2, the electronic money terminal 15 notifies the electronic money card 19 of the new center public key Ck2.

[0213] The encryption method is not limited to the public key method, and a common key method may be used. In this case, it is desirable to enhance the tamper resistance of the electronic money card 19 from the viewpoint of security.

Each time a transaction is performed in this system, a new encryption key (a pair of a secret key and a public key, a common key, etc.) is issued and notified to the electronic money card. May be used for encryption / decryption.

Further, keys may be generated based on random numbers. According to such a system, a key to be issued next cannot be predicted, and leakage of information can be prevented. A key issued in the past and a newly issued key may be combined and used as a key for encryption and decryption. For example, the present key _Kt and the previous key _Kt-1 may be combined, and various information may be encrypted using { _Kt + _Kt-1 } as a key, and further decrypted.

In the electronic money system, a complete copy of the electronic money card 19 itself may be created and illegally used. In order to prevent this kind of illegal use, the electronic money server 13 assigns a unique number to the electronic money card 19 for each transaction, and when the online transaction starts, the electronic money card 19 sends this unique number to the electronic money server. 13 and confirms that it matches the unique number of the electronic money card 19 registered in the electronic money server, and then conducts a transaction. What is necessary is just to comprise so that it may register with the card 19 and the electronic money server 13. According to this configuration, the unique number is updated each time a transaction is made. Therefore, even if a copy of the electronic money card 19 is made, once the transaction is performed, the unique number of the electronic money server except for the one used is changed. 13 and cannot be used. Therefore, unauthorized use by copying the electronic money card 19 can be prevented.

[0219]

As described above, according to the present invention,
Electronic money stored in the electronic money card can be exchanged. In addition, since the transaction history is recorded in the write-once type storage unit, it is possible to easily detect an improper act or the like by verifying the recorded contents of the write-once type storage unit.
Further, by recording the transaction history even at the center, fraudulent acts can be detected more reliably. In addition, when electronic money is traded, its legitimacy is determined based on the physical characteristics of the operator, so that the reliability of the transaction can be improved.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of an electronic money system according to an embodiment of the present invention.

2A is a diagram showing a structure of a balance table stored in the electronic money server, FIG. 2B is a diagram showing a structure of an accident card list stored in the electronic money server,
(C) is a diagram showing a structure of an accident terminal list stored in the electronic money server.

FIG. 3 is a diagram showing a structure of a transaction history table stored in the electronic money server.

FIGS. 4A and 4B are diagrams illustrating an example of an external configuration of an electronic money terminal.

FIG. 5 is a diagram showing a structure of an account table stored in a bank center.

FIG. 6 is a diagram showing a structure of an electronic money card.

FIG. 7 is a diagram showing an outline of an electronic money charging process.

FIGS. 8A to 8C are diagrams showing display examples of the electronic money terminal.

FIG. 9 is a diagram illustrating a flow of an electronic money charging process.

FIG. 10 is a diagram showing an outline of a personal authentication information issuing process.

FIG. 11 is a diagram illustrating a flow of a personal authentication information issuance process.

FIG. 12 is a diagram showing an outline of electronic money payment processing.

FIG. 13 is a diagram for explaining the flow of electronic money payment processing.

FIG. 14 is a diagram showing an outline of a matching process.

FIG. 15 is a diagram illustrating a flow of a matching process.

FIG. 16 is a diagram illustrating states of an IC unit, an optical storage unit, and a balance table before and after transmission of a non-transmission history in a matching process.

FIG. 17 is a diagram showing an outline of electronic money transfer processing.

FIG. 18 is a diagram for explaining the flow of electronic money transfer processing.

FIG. 19 is a diagram illustrating a flow of electronic money transfer processing between two electronic money terminals.

FIG. 20 is a diagram illustrating an outline of an electronic money cashing process.

FIG. 21 is a diagram for explaining the flow of electronic money redemption processing.

FIG. 22 is a diagram illustrating an example of a configuration of an electronic money system when a certificate authority is not included.

FIG. 23 is a diagram showing a flow of an electronic money charging process when a certificate authority is not included.

FIG. 24 is a diagram showing a flow of electronic money payment processing when a certificate authority is not included.

FIG. 25 is a diagram showing a flow of a matching process when a certificate authority is not included.

FIG. 26 is a diagram showing a flow of electronic money transfer processing when a certificate authority is not included.

FIG. 27 is a diagram showing a flow of electronic money realization processing when a certificate authority is not included.

FIG. 28 is a diagram illustrating an example of a fingerprint reading device.

FIG. 29 is a diagram illustrating a configuration example of a fingerprint matching circuit;

FIG. 30 is a diagram showing a display example of the electronic money terminal at the time of fingerprint collation.

[Description of Signs] 10 center 11 certificate authority 13 electronic money server 15 electronic money terminal 19 electronic money card 20 IC unit 21 optical storage unit 30 storage unit 31 input unit 32 display unit 33 card processing unit 34 touch panel 35, 35A, 35B card Slot 36 Cash drawer

 ──────────────────────────────────────────────────続 き Continuing on the front page (72) Inventor Ichiro Shinkai 3-3-3 Toyosu, Koto-ku, Tokyo Inside NTT Data Communication Co., Ltd. (72) Inventor Toyohiro Kitada Toyosu-san, Koto-ku, Tokyo Chome 3-3 NTT Data Communication Co., Ltd.

Claims (18)

[Claims] An electronic money card comprising a write-once storage unit and an IC memory unit for storing information relating to a monetary value.
An electronic money system comprising: a terminal that processes the electronic money card; a center connected to the terminal via a communication line to control the terminal; and a bank computer connected to the center via a communication line. The write-once type storage unit of the electronic money card stores transaction history information, and the IC memory unit of the electronic money card stores position information indicating the position of the transaction history information stored on the write-once type storage unit. An input unit for inputting an electronic money transaction instruction including a cash exchange and a transaction amount; and a cash exchange based on the transaction instruction and the transaction amount among the transaction instructions input by the input unit. A cashing request sending means for sending a request message to the center; and a cashing completion message sent from the center in response to the cashing completion message stored in the IC memory unit of the electronic money card. Means for writing transaction history information relating to the cashing process to the write-once type storage unit of the electronic money card in accordance with the position information, wherein the center receives the cashing request message from the terminal, and Means for transmitting a transfer instruction message based on the cashing request message to the bank computer, and means for transmitting the cashing end message to the terminal in response to a transfer completion message from the banking computer; The computer is configured to transfer the transaction amount indicated by the transfer instruction message from the center from a predetermined account to the account specified by the transfer instruction message, and the transfer completion message to be transmitted when the transfer by the transfer unit is completed. Means for transmitting data to a center. 2. The electronic money card, wherein at least one of the write-once storage unit and the IC memory unit stores account specifying information for specifying an account, and the cashing request transmitting unit stores the electronic money card in the electronic money card. The electronic money system according to claim 1, further comprising: a unit that reads out the stored account identification information and includes the read account identification information in the cashing request message. 3. The terminal determines whether or not the balance held by the electronic money card is equal to or greater than the transaction amount entered by the input means. If the balance is less than the transaction amount, an error message is displayed. The electronic money system according to claim 1 or 2, further comprising means for displaying a message and requesting to cancel the transaction or to re-enter the amount. 4. The center has a balance storage means for storing the balance of the electronic money card, and a transaction amount specified by the cashing request message received from the electronic money card in the balance storage means. The electronic money system according to any one of claims 1 to 3, further comprising balance updating means for subtracting the balance from the balance of the electronic money card. 5. The center determines whether a transaction amount indicated by the cashing request message received from the electronic money card is equal to or less than a balance of the electronic money card stored in the balance storage means. 5. The electronic money system according to claim 4, further comprising: if the balance is less than the transaction amount, transmitting to the terminal an instruction message instructing to stop the transaction or re-enter the amount. 6. The transaction history information includes, for each transaction, a transaction type, a transaction date, information for identifying the terminal that has processed the transaction, and a transaction amount. The electronic money system according to claim 1. 7. The write-once storage unit of the electronic money card stores transaction histories of all transactions made with the electronic money card. An electronic money system according to item 1. 8. The system according to claim 1, wherein the center includes transaction history storage means for storing transaction histories of all transactions made with the electronic money card. Electronic money system. 9. At least one of the write-once type storage unit and the IC memory unit of the electronic money card stores a card identification code of the electronic money card, and the cashing request message is stored in the electronic money card. An unauthorized card ID storage unit for storing the card identification code of the electronic money card whose use is not permitted as an unauthorized card ID; and the card identification code included in the cashing request message and the unauthorized computer. 9. The system according to claim 1, further comprising: means for comparing the fraudulent card ID stored in the card ID storage means and stopping a transaction when a matching fraudulent card ID is detected. An electronic money system according to item 1. 10. The terminal stores a terminal identification code, the cashing request message includes the terminal identification code, and the center stores the terminal identification code of the terminal whose use is not permitted as an unauthorized terminal ID. Unauthorized terminal ID storage means, and the unauthorized terminal I storing the terminal identification code included in the cashing request message in the unauthorized terminal ID storage means.
The electronic money system according to any one of claims 1 to 9, further comprising: means for canceling a transaction when a matching unauthorized terminal ID is detected as compared with D. 11. The electronic money card further includes a certificate authority having a personal information storage unit for storing a personal public key, wherein the IC memory unit of the electronic money card stores the personal public key, Includes the personal public key of the electronic money card, the center includes a personal key transmitting unit that transmits the personal public key to the certificate authority, out of the received cash request message, the certificate authority includes: Determine whether the received personal public key matches any of the personal public keys stored in the personal information storage means, if not, send a message to the terminal to the effect that transaction is not possible, The electronic money system according to any one of claims 1 to 10, further comprising means for canceling the transaction. 12. The electronic money card further includes a certificate authority having personal information storage means for storing a card identification code, wherein the IC memory section of the electronic money card stores the card identification code, Includes the card identification code of the electronic money card, the center includes means for transmitting the card identification code to the certificate authority out of the received cash request message, and the certificate authority receives the received card. It is determined whether or not the card identification code matches any of the card identification codes stored in the personal information storage means. The electronic money system according to any one of claims 1 to 11, further comprising: 13. The electronic money card, wherein the IC memory unit includes a pair of personal public keys and a personal secret key; the terminal includes a pair of terminal public keys and a terminal secret key; A first authenticator generated using the information related to the transaction and the personal secret key of the electronic money card, and a second authenticator generated using the information related to the transaction and the terminal secret key of the terminal. Including the personal public key and the terminal public key, wherein the bank computer uses the personal public key and the terminal public key to determine whether the first and second authenticators match. The electronic money system according to any one of claims 1 to 12, wherein a process for performing cashing is executed only when they match. 14. The transaction history information stored in the write-once type storage unit of the electronic money card does not include information for specifying the electronic money card.
3. The electronic money system according to any one of 3. 15. One of the IC memory unit and the write-once type storage unit of the electronic money card stores characteristic data indicating a physical characteristic of a user, and the terminal includes a physical characteristic of an operator. Acquiring means for acquiring characteristic data indicating the characteristic data, reading means for reading the characteristic data from the electronic money card, and comparing the characteristic data acquired by the acquiring means with the characteristic data read by the reading means. Determining means for determining whether or not they substantially match each other, and enabling the electronic money transaction via the terminal when the determining means determines that they substantially match, and determining that the determining means does not substantially match. The electronic money system according to any one of claims 1 to 14, further comprising: transaction control means for prohibiting electronic money transactions via the terminal when the electronic money is determined. Beam. 16. The write-once type storage section of the electronic money card is constituted by an optical storage section in which pits are physically formed by irradiating light energy to which data is written and which cannot be rewritten. The electronic money system according to any one of claims 1 to 15, wherein: 17. An electronic money system comprising: a plurality of terminals; a center connected to the plurality of terminals via a communication line; and a bank computer connected to the center via a communication line. The money system includes an electronic money transaction file that stores information related to the transaction. The terminal includes an input unit for inputting an electronic money transaction instruction including cash and a transaction amount, and the transaction input by the input unit. A cashing request transmitting means for transmitting a cashing request message based on the cashing instruction and the transaction amount of the instructions to the center; Means for writing a history, wherein the center sends a transfer instruction message based on the cashing request message from the terminal to the bank computer. Means for signal, in response to the transfer complete message from the bank computer, and means for transmitting the cashing completion message to the terminal,
The bank computer, a transfer means for transferring the transaction amount indicated by the transfer instruction message from the center from a predetermined account to the account specified by the transfer instruction message, and when the transfer by the transfer means is completed, Means for transmitting a transfer completion message to the center. 18. The electronic money system according to claim 17, wherein the electronic money transaction file is stored in a medium having a write-once storage unit and an IC memory unit.